CVE-2010-3114
Published: 24 August 2010
The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
chromium-browser Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| lucid |
Released
(6.0.472.53~r57914-0ubuntu0.10.04.1)
|
|
| maverick |
Not vulnerable
|
|
| natty |
Not vulnerable
|
|
| upstream |
Released
(5.0.375.127)
|
|
|
webkit Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Ignored
(end of life)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Released
(1.2.5-0ubuntu0.9.10.1)
|
|
| lucid |
Released
(1.2.5-0ubuntu0.10.04.1)
|
|
| maverick |
Not vulnerable
(1.2.4-1ubuntu1)
|
|
| natty |
Not vulnerable
(1.2.4-1ubuntu1)
|
|
| upstream |
Released
(1.2.5)
|
|
|
Patches: upstream: http://trac.webkit.org/changeset/63773 |
||